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CLAIMS 

1 . A conditional access subunit for connection to an IEEE 1 394 
network, the subunit including: 

means to receive AV/C Conditional Access Commands over the T EBE 
1394 network from another subunit; and 

means to transmit AV/C responses over the TFkp. 1394 network in 
response to the received AV/C Conditional Access Commands. 



means to transmit AV/C Conditional Access Commands over the IEEE 
1394 network to die conditional access subunit and * 

means to receive AV/C responses from the conditional access subunit over 
the IEEE 1394 network in response $o the transmitted AV/C Conditional Access 
Commands. 

3 . A method of providing a Conditional Access Module on an tfep. 
1394 network, the method comprising: 

defining a Conditional Access Module as a Conditional Access Subunit of 
the DEEE 1394 network; 

providing AV/C Conditional Access Commands to allow communication 
between the Conditional Access Subunit and other Subunits on the network. 

4. A subunit according to claim 1 

wherein the AV/C Conditional Access Commands include a CA enable command. 



2. A subunit for use with a conditional access subunit on an rerp 
1 3 94 network, the subunit including: 



A subunit 



according to claim 4 wherein the AV/C op 



code for the CA enable command is CC W . 
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6. Asubunit according to claim 4 wherein the CA 
enable command includes a system ID for identifying the broadcast system to which 
the command relates. 

7. Asubunit according to claim 4 wherein CA 
enable control commands include an action operand which is able to represent at 
least add, update, remove and remove all actions. 

8. Asubunit according to claim. 4 wherein 
CA enable control command responses include an action operand corresponding to 
the action operand of a received CA enable control command and a status operand 
wherein, for an action operand representing an add action, the status operand is able 
to represent at least descrambling, descrambling possible under conditions (purchase 
dialogue) and descrambling possible under conditions (technical dialogue), for an 
action operand representing an update action, the status operand is able to represent 
at least descrambling, descrambling possible under conditions (purchase dialogue) 
and descrambling possible under conditions (technical dialogue status), for an action 
operand representing a remove action, the status operand is able to represent at least a 
remove successful status and, for an action operand representing a remove all action, 
the status operand is able to represent at least a remove successful status. 

9. A subunit according to claim. 4 wherein 
CA enable status and notify commands include an action operand able to represent at 
least one of an add, update, remove and remove all action. 

10. A subunit ( according to claim 9 wherein CA 
enable status and notify command responses include an action operand 
corresponding to the action operand of the CA enable status and notify command and 
a status operand wherein, for an action operand representing an add action, the status 
operand is able to represent at least one of descrambling will be possible, 
descrambling will be possible under conditions (purchase dialogue), descrambling 
will be possible under conditions (technical dialogue), descrambling will not be 
possible, descrambling will not be possible (because no entitlement), descrambling 
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will not be possible (for technical reasons), descrambling will not be possible 
(insufficient bandwidth in CA subunit) and descrambling will not be possible 
(incompatible CA system) and for an action operand representing an update action, 
the status operand is able to represent at least descrambling will be possible, 
descrambling will be possible under conditions (purchase dialogue), descrambling 
will be possible under conditions (technical dialogue), descrambling will not be 
possible, descrambling will not be possible (because no entitlement), descrambling 
will not be possible (for technical reasonsX descrambling will not be possible 
(insufficient bandwidth in CA subunit) and descrambling will not be possible 
(incompatible CA system). 

11. A subunit according to ,. claim 4 , 
wherein the CA enable command includes a service ID operand for specifying the 
service to which the program map PID is applicable. 

12. A subunit. according to claim 4 
wherein the CA enable command includes an operand for specifying the number of 
elementary PID definitions to follow, together with operands including elementary 
PED definitions. 

13. A subunit * according to claim 12 wherein each of the 
elementary PID definitions include a stream type operand for identifying the type of 
service element carried within the packets with the PID whose value is specified by 
the elementary PID and elementary PID operands for specifying the PID of the 
transport stream packets that carry the associated service dement 

14. A subunit according to c i aim <| wherein the 
AV/C Conditional Access Commands include a CA entitlement command. 



15. A subunit according to claim 14 wherein the AV/C 

opcode for the CA entitlement command is CD li5 . 
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16. A subunit according to claim 14 . wherein the CA 
entitlement command includes a system ID for identifying the broadcast system to 
which the command relates. 

17. A subunit according to claim 1 4 wherein the 
CA entitlement command includes operands defining broadcast systems specific 
data. 

18. A subunit according to claim 17 wherein the broadcast 
systems specific data is able to represent at least the network ID, the original network 
ID, the transport stream ID, the service ID and the event ID. 

19. A subunit *. according to claim 14 . 
wherein, for a CA entitlement command response, the response has an operand able 
to represent entitlement status. 

20. A subunit according to claim 1 9 wherein the entitlement 
status operand is able to represent at least entitlement unknown, entitlement 
available, entidement not available, user dialogue required, user dialogue complete 
unknown, user dialogue complete available and user dialogue complete not available. 

21. A subunit according to claim 1 wherein the 
AV/C Conditional Access Commands include a security command. 

22. A subunit . according to claim 21 wherein the AV/C 
opcode for the security command is 0F W . 

23. A subunit according to claim 20 wherein the 
security command includes operands for defining authentication and key exchange 
protocols. 
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24. 



A subuait 



. according to claim 21 



wherein the 



subunit will only transmit data once it has received appropriate authentication from 
the receiving subunit. 

25. A conditional access subunit for connection to an IEEE 1394 
network for use in descrambling a transport stream received over the network 
wherein the conditional access subunit, having descrambled the transport stream, 
introduces a local scrambling before retransmitting the transport stream to other 
subunits on the network, such that only authorised subunits on the network capable 
of local descrambling can receive the information in the transport stream. 

26. A conditional access subunit for connection to an IEEE 1394 
network having a tuner subunit, the conditional access subunit having means for 
periodically contacting the tuner subunit to request the received transport stream for a 
period of time sufficient to allow the conditional access subunit to update the 
entitlement management messages stored in the conditional access subunit 

27. An IEEE 1394 network including a conditional access subunit 
according to claim 26, a tuner subunit and a control subunit wherein the control 
subunit ensures that the request from the conditional access subunit to the tuner unit 
does not cause the tuner unit to change channel while a user is making use of a 
particular service. 



28. A tuner device having an embedded conditional access subunit 
according to j claim 1 



